169f57f59a9d307214a7ce2c4c657c301874e13cf1a0fa14a698b76e98f377b3

Sharing

Copy URL Twitter E-mail

General

Target

169f57f59a9d307214a7ce2c4c657c301874e13cf1a0fa14a698b76e98f377b3
Size

840KB
MD5

e7b10bdbfcbac3acb3d0e115a66fb9d2
SHA1

83c36485165ed89a57664f038aa9be5048efc094
SHA256

169f57f59a9d307214a7ce2c4c657c301874e13cf1a0fa14a698b76e98f377b3
SHA512

b1f6002d2fbc99c68291a82bf7451bad902b13485321112ca106a2abe8421845b6841782b8768293b679dae145193fc8c76d2bd1b394219010e07c2a4a997a60
SSDEEP

12288:Eifub9X8upQuu45XSgdDXABGpU6XnwM/PR6iUNW+CtXMh0:EikLpQuu4BSgZZU6AM/JRtc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

169f57f59a9d307214a7ce2c4c657c301874e13cf1a0fa14a698b76e98f377b3
.exe windows x86

e7c2fb9fd890846a48ad91f0f0902e56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetStringTypeExA
GetThreadLocale
FlushFileBuffers
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
CreateFileA
SetFilePointer
GetPrivateProfileIntA
GetCurrentDirectoryA
GetFileType
GetProcessVersion
OutputDebugStringA
SizeofResource
GetCPInfo
RtlUnwind
GetTimeZoneInformation
GetLocalTime
CreateDirectoryA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
ReadFile
GetModuleFileNameW
GlobalFlags
SetLastError
TlsGetValue
GetLocaleInfoA
SetStdHandle
IsBadReadPtr
HeapReAlloc
HeapSize
FatalAppExitA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
IsBadWritePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetLocaleInfoW
CompareStringA
CompareStringW
GetVersion
SearchPathA
GetProfileIntA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
MulDiv
WritePrivateProfileStringA
GetStdHandle
GetCurrentProcess
DuplicateHandle
GetTempFileNameA
WriteFile
FormatMessageA
lstrcpyA
lstrcatA
GlobalGetAtomNameA
GlobalReAlloc
LocalReAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GlobalHandle
GetDiskFreeSpaceA
InitializeCriticalSection
CopyFileA
GetLastError
RemoveDirectoryA
GetFullPathNameA
VirtualQuery
GetWindowsDirectoryA
DeleteFileA
LoadLibraryExA
WideCharToMultiByte
GetSystemTime
LoadResource
LockResource
FindResourceA
GetProcessHeap
HeapFree
HeapAlloc
Sleep
TlsSetValue
FileTimeToLocalFileTime
TlsFree
TlsAlloc
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
FileTimeToSystemTime
RaiseException
MultiByteToWideChar
GetTempPathA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GetModuleFileNameA
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetVolumeInformationA
GetShortPathNameA
GetVersionExA
GetPrivateProfileStringA
GetComputerNameA
GlobalMemoryStatus
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrlenA
LoadLibraryA
GetProcAddress
lstrcpynA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateThread
ExitThread
FindFirstFileA
GetDriveTypeA
InterlockedIncrement
InterlockedDecrement
GlobalAddAtomA
SleepEx
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
GetProfileStringA
SetErrorMode
GetSystemInfo
GetACP
GetOEMCP
GetSystemDefaultLangID
GetUserDefaultLangID
FindClose
FindNextFileA

user32

GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
GetDlgItemInt
SetWindowTextA
MoveWindow
ShowWindow
ReleaseDC
GetDC
wvsprintfA
DestroyMenu
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadStringW
GetClassNameA
PtInRect
GetDesktopWindow
InsertMenuA
CheckDlgButton
CheckRadioButton
LoadCursorA
GetSysColorBrush
GetMenuStringA
InflateRect
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
DeleteMenu
GetDialogBaseUnits
SetForegroundWindow
IsChild
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SendDlgItemMessageA
UpdateWindow
GetWindowRect
CharToOemA
RegisterWindowMessageA
EndDialog
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyboardLayout
IsWindowUnicode
GetWindowLongW
PeekMessageW
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
SetCapture
SetFocus
ReleaseCapture
SetActiveWindow
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
GetSysColor
DrawIcon
GetSystemMenu
AppendMenuA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MapWindowPoints
SystemParametersInfoA
GetWindowPlacement
GetMessagePos
GetForegroundWindow
GetWindow
SendMessageA
LoadIconA
FindWindowA
MessageBoxA
LoadStringA
GetMenuState
OemToCharA
InvalidateRect
CharNextA
UnregisterClassA
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
DrawFocusRect

gdi32

GetDCOrgEx
SetTextColor
SetBkColor
GetObjectA
PatBlt
CreateRectRgnIndirect
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
SetTextAlign
SetTextJustification
LineTo
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
SetColorAdjustment
PolyBezierTo
PolylineTo
GetClipRgn
CreateRectRgn
DeleteObject
ExtSelectClipRgn
PlayMetaFileRecord
SelectClipPath
EnumMetaFile
PlayMetaFile
GetObjectType
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
ExtCreatePen
CreateSolidBrush
CreatePen
CreatePatternBrush
CreateDIBPatternBrushPt
CreateHatchBrush
RectVisible
TextOutA
PtVisible
Escape
GetTextExtentPoint32A
ExtTextOutA
CreateFontIndirectA
GetMapMode
GetTextMetricsA
CombineRgn
DPtoLP
SetRectRgn
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
CreateBitmap
BitBlt
GetClipBox

comdlg32

GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegEnumKeyExA
ReportEventA
DeregisterEventSource
RegisterEventSourceA
RegDeleteKeyA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA

shell32

SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetPathFromIDListA

comctl32

ImageList_Merge
ImageList_Write
ImageList_Create
ImageList_LoadImageA
ImageList_Destroy
ImageList_Read
ord17
ord13
ord14

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

__FineObjUsed

Sections

.text
Size: 540KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e7c2fb9fd890846a48ad91f0f0902e56

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

version

Exports

Exports

Sections

.text Size: 540KB - Virtual size: 537KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 28KB - Virtual size: 51KB

.idata Size: 16KB - Virtual size: 13KB

.rsrc Size: 20KB - Virtual size: 18KB

.reloc Size: 40KB - Virtual size: 37KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 540KB - Virtual size: 537KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 28KB - Virtual size: 51KB

.idata
Size: 16KB - Virtual size: 13KB

.rsrc
Size: 20KB - Virtual size: 18KB

.reloc
Size: 40KB - Virtual size: 37KB

.UPX0
Size: 108KB - Virtual size: 260KB